Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.9DrayTek Vigor Routers OS Command Injection VulnerabilityKEVEPSS 98.2%Dec 27, 2024
- Critical9.8BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection VulnerabilityKEVEPSS 87.3%Dec 16, 2024
- Critical9.8Cleo Multiple Products Unauthenticated File Upload VulnerabilityKEVEPSS 94.0%Dec 13, 2024
- Medium6.9Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityKEVEPSS 94.8%Nov 18, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) OS Command Injection VulnerabilityKEVEPSS 59.7%Oct 8, 2024
- Critical10.0Palo Alto Networks PAN-OS Command Injection VulnerabilityKEVEPSS 100.0%Apr 12, 2024
- Critical9.8D-Link Multiple NAS Devices Command Injection VulnerabilityKEVEPSS 100.0%Apr 3, 2024
- Critical9.1Ivanti Connect Secure and Policy Secure Command Injection VulnerabilityKEVEPSS 100.0%Jan 10, 2024
- High7.3tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)EPSS 3.4%Jan 2, 2024
- Critical9.8Vmware Aria Operations for Networks Command Injection VulnerabilityKEVEPSS 98.3%Jun 7, 2023
- High8.8TP-Link Multiple Routers Command Injection VulnerabilityKEVEPSS 41.6%Jun 6, 2023
- Critical9.8Barracuda Networks ESG Appliance Improper Input Validation VulnerabilityKEVEPSS 87.7%May 24, 2023
- High8.8Arbitrary command injection in embano1/wipEPSS 3.7%Apr 24, 2023
- High7.2Cisco Small Business RV Series Routers Command Injection VulnerabilityKEVEPSS 54.1%Apr 13, 2023
- Critical9.8Sophos Web Appliance Command Injection VulnerabilityKEVEPSS 100.0%Apr 4, 2023
- High8.8TP-Link Archer AX-21 Command Injection VulnerabilityKEVEPSS 100.0%Mar 15, 2023
- High8.8github-slug-action vulnerable to arbitrary code executionEPSS 1.6%Mar 13, 2023
- Medium6.8Mitel MiVoice Connect Command Injection VulnerabilityKEVEPSS 10.6%Nov 21, 2022
- Critical9.8D-Link DSL-2750B Devices Command Injection VulnerabilityKEVEPSS 66.6%Oct 18, 2022
- High7.6In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file.EPSS 2.8%Apr 13, 2022
- High8.8Ivanti Pulse Connect Secure Command Injection VulnerabilityKEVEPSS 22.9%May 27, 2021
- High7.2Command Injection in lodashMay 6, 2021
- Critical9.8Cisco HyperFlex HX Data Platform Command Injection VulnerabilityKEVEPSS 100.0%May 6, 2021
- Critical9.8QNAP Network-Attached Storage (NAS) Command Injection VulnerabilityKEVEPSS 34.0%Apr 16, 2021
- Critical9.8QNAP NAS File Station Command Injection VulnerabilityKEVEPSS 28.6%Oct 28, 2020